$ rpki-client -vvf repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft File: 13697C4A24DCE77089F778CD506D620711B4472B.mft (raw, json) Hash identifier: unnn9HXBwmM+Q77ME2BbFUEFn4diPhaMg1Wbc94AGO4= Subject key identifier: AB:9A:99:98:D5:7E:10:9C:6A:0A:2C:34:81:36:5F:D2:EC:B1:BE:0A Authority key identifier: 13:69:7C:4A:24:DC:E7:70:89:F7:78:CD:50:6D:62:07:11:B4:47:2B Certificate issuer: /CN=13697C4A24DCE77089F778CD506D620711B4472B Certificate serial: 41CE77A66F12AE10378BE8DBFB32F61C9832B3DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft Manifest number: 0349 Signing time: Thu 21 Aug 2025 09:50:47 +0000 Manifest this update: Thu 21 Aug 2025 09:45:47 +0000 Manifest next update: Sun 24 Aug 2025 14:46:47 +0000 Files and hashes: 1: 3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa (hash: 5WAjPQFyaB8VU/xV/L/W+MpTyoJtVsIgPQ74sNXdzhE=) 2: 3130332e3136312e3131362e302f32342d3234203d3e203538333738.roa (hash: /rq1WhPl2nzWETUM/oiNyUY2THnfP1otKF0KD2KPb+U=) 3: 13697C4A24DCE77089F778CD506D620711B4472B.crl (hash: Xk+FaFYZaniVO2gxqzaANzAk83W5iv6OqqIW/DRy/vA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.crl rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 14:46:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ce:77:a6:6f:12:ae:10:37:8b:e8:db:fb:32:f6:1c:98:32:b3:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13697C4A24DCE77089F778CD506D620711B4472B Validity Not Before: Aug 21 09:45:47 2025 GMT Not After : Aug 24 14:46:47 2025 GMT Subject: CN=AB9A9998D57E109C6A0A2C3481365FD2ECB1BE0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d6:34:24:c4:db:4f:51:00:92:2d:ba:88:c1: c3:ad:2f:e2:12:fc:13:41:96:fc:65:02:7f:d8:9c: 76:0f:7b:99:cf:46:c9:17:32:8d:58:b4:f3:c8:70: 09:22:91:b2:bf:c7:fa:e0:5f:29:67:cb:9e:23:0d: 63:3a:d7:f4:f2:59:f5:54:97:e4:5a:d2:e2:ff:4f: 8e:40:62:6e:9b:25:a1:c4:7e:96:ef:a5:0c:d3:2d: 63:21:fe:5c:c7:49:0f:2a:c6:57:64:ca:5c:28:8e: ff:0a:f2:c3:3d:17:97:8e:2b:bf:1b:c4:1c:73:00: 02:4f:27:77:8c:26:77:46:81:e2:5b:28:28:d4:c6: d3:38:e1:b1:e5:85:a9:2c:53:6f:b4:23:f9:da:38: b1:f7:bb:c5:10:73:30:65:97:37:30:2e:c7:92:e8: 7e:aa:4b:90:97:ab:70:f3:5a:1d:2f:80:1b:08:94: c7:7e:46:cf:8c:96:79:24:d4:4f:bc:6e:34:c0:d3: 81:cf:1d:f9:6e:20:5f:ce:c9:da:39:2e:48:02:2d: 71:4e:0d:b8:aa:41:ba:34:55:55:6d:55:c3:ef:b0: ce:40:2b:35:91:e0:02:73:dc:74:f1:1f:d9:4e:35: cf:3f:6a:23:d1:40:a4:3a:56:58:ec:3c:f0:5f:8e: 2f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9A:99:98:D5:7E:10:9C:6A:0A:2C:34:81:36:5F:D2:EC:B1:BE:0A X509v3 Authority Key Identifier: keyid:13:69:7C:4A:24:DC:E7:70:89:F7:78:CD:50:6D:62:07:11:B4:47:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:c2:0c:43:41:82:ad:a4:d3:29:87:9d:4a:d3:d3:16:3b:07: 81:5b:e2:4b:e8:5b:6c:52:03:f0:5d:ab:b2:1f:03:35:6d:2b: 4d:d9:22:d3:f8:ad:9c:09:5c:19:56:b9:65:0f:ba:5a:3b:fa: 45:71:ca:fd:21:23:e4:01:66:4e:30:dc:e1:2d:7d:98:ee:ba: e8:74:87:88:94:e3:84:14:01:f7:d2:ce:f1:1c:36:18:05:a2: 19:ca:5e:0d:2a:c3:95:ea:ea:12:ce:a0:c9:7f:fe:54:1f:ea: 16:e3:93:28:ba:bd:69:09:b5:28:06:ba:3f:6d:21:58:21:d3: 5c:7b:12:7f:56:45:19:10:8e:fa:69:80:00:04:34:94:c7:c6: 6e:42:bb:f9:6f:c7:13:1d:f8:09:7d:c8:9c:4a:8d:be:fc:f3: af:15:e2:c1:fa:ff:e8:41:04:5f:03:85:7b:3e:6c:45:61:25: 63:65:99:b7:9c:20:00:19:d5:a5:d7:c9:9d:5b:90:43:b8:cc: 5f:c5:83:ac:bb:f7:34:26:f0:67:53:d5:4a:a5:0e:59:3f:f8: 44:44:01:e8:74:03:7b:7f:21:81:f0:21:d7:a2:f8:8f:ce:38: 25:6a:40:0b:18:a7:e2:fc:4d:c2:5c:d4:99:bf:dd:90:c1:e6: d9:70:8e:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQc53pm8SrhA3i+jb+zL2HJgys9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM2OTdDNEEyNERDRTc3MDg5Rjc3OENENTA2RDYyMDcx MUI0NDcyQjAeFw0yNTA4MjEwOTQ1NDdaFw0yNTA4MjQxNDQ2NDdaMDMxMTAvBgNV BAMTKEFCOUE5OTk4RDU3RTEwOUM2QTBBMkMzNDgxMzY1RkQyRUNCMUJFMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC11jQkxNtPUQCSLbqIwcOtL+IS /BNBlvxlAn/YnHYPe5nPRskXMo1YtPPIcAkikbK/x/rgXylny54jDWM61/TyWfVU l+Ra0uL/T45AYm6bJaHEfpbvpQzTLWMh/lzHSQ8qxldkylwojv8K8sM9F5eOK78b xBxzAAJPJ3eMJndGgeJbKCjUxtM44bHlhaksU2+0I/naOLH3u8UQczBllzcwLseS 6H6qS5CXq3DzWh0vgBsIlMd+Rs+Mlnkk1E+8bjTA04HPHfluIF/Oydo5LkgCLXFO DbiqQbo0VVVtVcPvsM5AKzWR4AJz3HTxH9lONc8/aiPRQKQ6VljsPPBfji/1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq5qZmNV+EJxqCiw0gTZf0uyxvgowHwYDVR0j BBgwFoAUE2l8SiTc53CJ93jNUG1iBxG0RyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzM1MDdmMy1mOGMwLTQxMGItYjE5ZS01N2U0OGJmMzIzMDUvMC8xMzY5N0M0QTI0 RENFNzcwODlGNzc4Q0Q1MDZENjIwNzExQjQ0NzJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTM2OTdDNEEyNERDRTc3MDg5Rjc3OENENTA2RDYyMDcxMUI0 NDcyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjczNTA3ZjMtZjhjMC00MTBiLWIx OWUtNTdlNDhiZjMyMzA1LzAvMTM2OTdDNEEyNERDRTc3MDg5Rjc3OENENTA2RDYy MDcxMUI0NDcyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHCDENBgq2k0ymHnUrT0xY7B4Fb4kvoW2xS A/Bdq7IfAzVtK03ZItP4rZwJXBlWuWUPulo7+kVxyv0hI+QBZk4w3OEtfZjuuuh0 h4iU44QUAffSzvEcNhgFohnKXg0qw5Xq6hLOoMl//lQf6hbjkyi6vWkJtSgGuj9t IVgh01x7En9WRRkQjvppgAAENJTHxm5Cu/lvxxMd+Al9yJxKjb78868V4sH6/+hB BF8DhXs+bEVhJWNlmbecIAAZ1aXXyZ1bkEO4zF/Fg6y79zQm8GdT1UqlDlk/+ERE Aeh0A3t/IYHwIdei+I/OOCVqQAsYp+L8TcJc1Jm/3ZDB5tlwjkM= -----END CERTIFICATE-----Generated at Sat Aug 23 16:12:36 2025 by rpki-client